$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft File: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json) Hash identifier: YWIC6Hrj0DyjOtv6uhhmTM7ZXtw80xZefm947a4Xua8= Subject key identifier: 5A:D9:CF:B4:45:FD:F2:41:81:13:5B:70:D3:BB:1E:78:32:9B:45:23 Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 Certificate issuer: /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft Manifest number: 066F Signing time: Fri 22 Aug 2025 22:38:29 +0000 Manifest this update: Fri 22 Aug 2025 22:38:28 +0000 Manifest next update: Fri 29 Aug 2025 22:38:28 +0000 Files and hashes: 1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: k2t6M4uPQ+R1NN6xunp8UBbdv9fRHaYCGT74VpvaXmU=) 2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: d2oIVGi69pBa33ybuBMk+1p+0WxxE+fB43cE7gCYVHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Validity Not Before: Aug 22 22:38:28 2025 GMT Not After : Aug 29 22:38:28 2025 GMT Subject: CN=68a8f164-a164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:2d:f9:7c:ba:ac:be:7a:45:f6:0b:5e:b8: da:35:11:b6:83:45:32:32:af:0f:62:91:9c:c2:87: f6:6f:93:b7:8a:09:66:89:23:c9:08:90:2b:1b:34: 39:59:5d:c1:f9:8e:49:24:19:58:51:d1:32:a0:af: ef:55:4f:99:c5:65:04:a8:57:81:fe:a2:4a:71:84: c0:6a:81:fd:10:6f:c4:c8:49:dc:b7:3a:69:42:b5: bc:cc:11:ec:82:01:d0:25:3d:bd:8a:73:5b:4b:80: cb:e5:99:ef:b9:61:77:0f:f3:50:86:26:6a:ee:33: 70:ec:df:6e:5c:35:a1:0c:8f:ee:9c:a9:fc:bc:2e: 6a:2c:bb:aa:41:f7:46:1f:d0:79:bb:2b:ae:9c:60: 99:8a:6d:4e:48:87:6b:f6:29:cd:b7:53:20:a3:92: 1a:e6:ee:23:2d:06:2c:6e:45:f3:eb:5a:d9:12:48: 7c:a6:68:64:77:6d:b0:3e:4c:13:93:ce:a0:a2:0f: ef:8e:ea:34:a3:d7:54:14:c7:f6:dd:7f:26:70:48: f9:d4:61:1e:c8:65:84:80:3d:c9:11:ea:de:ba:ab: 23:ca:cb:c3:23:c4:56:20:22:57:42:92:ca:30:79: dc:0b:ee:cb:59:d1:48:8a:de:8e:6d:3c:83:4f:57: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:CF:B4:45:FD:F2:41:81:13:5B:70:D3:BB:1E:78:32:9B:45:23 X509v3 Authority Key Identifier: keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:70:55:23:81:e4:9f:3b:ca:08:b9:df:64:6f:fe:61:aa:66: d1:6f:11:29:2a:da:75:78:01:11:94:f4:97:c3:ce:7c:1d:70: 5f:5b:a2:ba:42:19:fb:4c:b8:30:8b:d6:4f:35:32:ee:28:2f: 48:9c:af:5a:0a:2f:2b:fd:0c:94:f0:6c:2c:f9:e2:26:bc:98: e6:cc:1b:a7:18:cc:b6:32:ca:62:98:e1:b3:51:bb:52:0c:ee: d6:b9:23:84:63:e7:77:d4:bb:ac:12:cc:83:00:72:ad:8f:a4: 71:a2:7f:62:83:9d:4d:40:6a:af:bc:98:d0:7a:de:e6:ad:e2: 17:98:6b:e5:2c:9c:fd:5d:37:28:3d:cd:c1:26:6f:6e:c1:f0: b1:0c:27:db:7e:57:59:83:5e:b0:45:d7:d8:96:14:52:35:e8: a0:6f:04:7b:be:71:42:16:18:91:cc:9a:35:f1:30:98:c0:26: da:8a:b0:8c:16:a2:68:bf:86:33:91:a4:2b:62:59:61:c0:01: 82:9e:86:68:46:31:1d:5a:31:af:7e:5c:d3:fd:0b:e8:81:d1: a7:32:a2:04:04:bc:24:68:15:f6:5c:00:a2:32:78:fb:a1:50: a0:a8:56:50:8c:33:95:7c:1e:22:a7:09:65:ad:71:23:c0:3f: e8:b9:53:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDUxMTAvBgNVBAUTKEYwNUJCRDI2RDRERTA4RjY1ODhDQjdGQUZGQjE4MzBG QUJDMzcxNjcwHhcNMjUwODIyMjIzODI4WhcNMjUwODI5MjIzODI4WjAYMRYwFAYD VQQDEw02OGE4ZjE2NC1hMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3ot+Xy6rL56RfYLXrjaNRG2g0UyMq8PYpGcwof2b5O3iglmiSPJCJArGzQ5 WV3B+Y5JJBlYUdEyoK/vVU+ZxWUEqFeB/qJKcYTAaoH9EG/EyEnctzppQrW8zBHs ggHQJT29inNbS4DL5ZnvuWF3D/NQhiZq7jNw7N9uXDWhDI/unKn8vC5qLLuqQfdG H9B5uyuunGCZim1OSIdr9inNt1Mgo5Ia5u4jLQYsbkXz61rZEkh8pmhkd22wPkwT k86gog/vjuo0o9dUFMf23X8mcEj51GEeyGWEgD3JEereuqsjysvDI8RWICJXQpLK MHncC+7LWdFIit6ObTyDT1fLfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrZz7RF /fJBgRNbcNO7Hngym0UjMB8GA1UdIwQYMBaAFPBbvSbU3gj2WIy3+v+xgw+rw3Fn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJENS8wRDI2RDRBMDhF NTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQWllqTGY2XzdHREQ2dkRj V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhGdTlKdFRlQ1BaWWpMZjZfN0dERDZ2RGNXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJENS8wRDI2RDRBMDhFNTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQ WllqTGY2XzdHREQ2dkRjV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDcFUjgeSfO8oIud9kb/5hqmbRbxEpKtp1eAERlPSXw858HXBfW6K6 Qhn7TLgwi9ZPNTLuKC9InK9aCi8r/QyU8Gws+eImvJjmzBunGMy2MspimOGzUbtS DO7WuSOEY+d31LusEsyDAHKtj6Rxon9ig51NQGqvvJjQet7mreIXmGvlLJz9XTco Pc3BJm9uwfCxDCfbfldZg16wRdfYlhRSNeigbwR7vnFCFhiRzJo18TCYwCbairCM FqJov4YzkaQrYllhwAGCnoZoRjEdWjGvflzT/QvogdGnMqIEBLwkaBX2XACiMnj7 oVCgqFZQjDOVfB4ipwllrXEjwD/ouVMB -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:48 2025 by rpki-client